CVE-2021-38118

Possible Local Privilege Escalation Vulnerability in OpenText iManager

Possible improper input validation Vulnerability in iManager has been discovered in OpenText™ iManager 3.2.4.0000.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Microfocus Opentext

Products

Imanager Imanager

CVE-2023-24467

Possible Command Injection in OpenText iManager

Possible Command Injection in iManager GET parameter has been discovered in OpenText™ iManager 3.2.6.0000.

CVSS 3.1 · 8.8 High EPSS 1.1% KEV · Not listed

Vendors

Microfocus Opentext

Products

Imanager Imanager

CVE-2023-24466

Possible XML External Entity Injection in OpenText iManager

Possible XML External Entity Injection in iManager GET parameter has been discovered in OpenText™ iManager 3.2.6.0200.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Vendors

Microfocus Opentext

Products

Imanager Imanager

CVE-2021-38117

Possible Remote Code Execution Vulnerability OpenText iManager

Possible Command injection Vulnerability in iManager has been discovered in OpenText™ iManager 3.2.4.0000.

CVSS 3.1 · 8.8 High EPSS 1.1% KEV · Not listed

Vendors

Microfocus Opentext

Products

Imanager Imanager

CVE-2022-26324

Possible XSS in iManager URL for access Component

Possible XSS in iManager URL for access Component has been discovered in OpenText™ iManager 3.2.6.0000.

CVSS 3.1 · 7.6 High EPSS < 1% KEV · Not listed

Vendors

Microfocus

Products

Imanager

CVE-2021-38116

Possible Command injection Vulnerability in OpenText iManager

Possible Elevation of Privilege Vulnerability in iManager has been discovered in OpenText™ iManager. This impacts all versions before 3.2.5

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Microfocus Opentext

Products

Imanager Imanager

CVE-2021-38119

Possible Reflected Cross-Site Scripting (XSS) Vulnerability in OpenText iManager

Possible Reflected Cross-Site Scripting (XSS) Vulnerability in iManager has been discovered in OpenText™ iManager 3.2.4.0000.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed

Vendors

Microfocus

Products

Imanager

CVE-2021-38134

Possible Reflected and Stored XSS in OpenText iManager

Possible XSS in iManager URL for access Component has been discovered in OpenText™ iManager 3.2.5.0000.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed

Vendors

Microfocus

Products

Imanager

CVE-2024-3486

XML External Entity injection vulnerability in iManager

XML External Entity injection vulnerability found in OpenText™ iManager 3.2.6.0200. This could lead to information disclosure and remote code execution.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microfocus

Products

Imanager

CVE-2024-3487

Broken Authentication vulnerability in iManager

Broken Authentication vulnerability discovered in OpenText™ iManager 3.2.6.0200. This vulnerability allows an attacker to manipulate certain parameters to bypass authentication.

CVSS 3.1 · 3.5 Low EPSS < 1% KEV · Not listed

Vendors

Microfocus

Products

Imanager

CVE-2024-3488

File Upload vulnerability in unauthenticated session found in iManager.

File Upload vulnerability in unauthenticated session found in OpenText™ iManager 3.2.6.0200. The vulnerability could allow ant attacker to upload a file without authentication.

CVSS 3.1 · 5.6 Medium EPSS < 1% KEV · Not listed

Vendors

Microfocus

Products

Imanager

CVE-2024-3969

XML External Entity injection vulnerability in iManager

XML External Entity injection vulnerability found in OpenText™ iManager 3.2.6.0200. This could lead to remote code execution by parsing untrusted XML payload

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microfocus

Products

Imanager

CVE-2024-4429

Cross Site Request Forgery vulnerability in iManager

Cross-Site Request Forgery vulnerability has been discovered in OpenText™ iManager 3.2.6.0200. This could lead to sensitive information disclosure.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Microfocus

Products

Imanager

CVE-2024-3484

Path Traversal vulnerability found in iManager

Path Traversal found in OpenText™ iManager 3.2.6.0200. This can lead to privilege escalation or file disclosure.

CVSS 3.1 · 5.7 Medium EPSS < 1% KEV · Not listed

Vendors

Microfocus

Products

Imanager

CVE-2024-3485

Server-Side Request Forgery vulnerability in iManager

Server Side Request Forgery vulnerability has been discovered in OpenText™ iManager 3.2.6.0200. This could lead to senstive information disclosure.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

Microfocus

Products

Imanager

CVE-2024-3483

Remote Code Execution vulnerability in the iManager

Remote Code Execution has been discovered in OpenText™ iManager 3.2.6.0200. The vulnerability can trigger command injection and insecure deserialization issues.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microfocus

Products

Imanager

CVE-2024-3967

Remote Code Execution vulnerability in the iManager

Remote Code Execution has been discovered in OpenText™ iManager 3.2.6.0200. The vulnerability can trigger remote code execution unisng unsafe java object deserialization.

CVSS 3.1 · 7.6 High EPSS < 1% KEV · Not listed

Vendors

Microfocus

Products

Imanager

CVE-2024-3968

Remote Code Execution vulnerability in the iManager

Remote Code Execution has been discovered in OpenText™ iManager 3.2.6.0200. The vulnerability can trigger remote code execution using custom file upload task.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microfocus

Products

Imanager

CVE-2024-3970

Server-Side Request Forgery vulnerability in iManager

Server Side Request Forgery vulnerability has been discovered in OpenText™ iManager 3.2.6.0200. This could lead to senstive information disclosure by directory traversal.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

Microfocus

Products

Imanager

CVE-2021-38135

Possible External service interaction Vulnerability in OpenText iManager

Possible External Service Interaction attack in iManager has been discovered in OpenText™ iManager 3.2.6.0000.

CVSS 3.1 · 8.6 High EPSS < 1% KEV · Not listed

Vendors

Microfocus Opentext

Products

Imanager Imanager